C3C/nix-configuration
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

veracode gov stage access

Browse Source
This commit is contained in:
Arnie 2025-09-04 17:03:40 +02:00
parent b163b2f9ce
commit 7e2ae203da
No known key found for this signature in database
GPG Key ID: 4BDFA3BCF2999D11
2 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
home-manager/veracode/.okta_aws_login_config
View File

@ -2,8 +2,8 @@
okta_org_url = https://govus-staging-veracode.okta.com okta_org_url = https://govus-staging-veracode.okta.com
gimme_creds_server = appurl gimme_creds_server = appurl
aws_rolename = arn:aws-us-gov:iam::403885414333:role/Corp-Engineer aws_rolename = arn:aws-us-gov:iam::403885414333:role/Corp-Engineer
write_aws_creds = False write_aws_creds = True
cred_profile = role cred_profile = 403885414333-Corp-Engineer
okta_username = lcech@veracode.com okta_username = lcech@veracode.com
app_url = https://govus-staging-veracode.okta.com/home/amazon_aws/0oame0n0rGjDo9BvZ4h6/272 app_url = https://govus-staging-veracode.okta.com/home/amazon_aws/0oame0n0rGjDo9BvZ4h6/272
resolve_aws_alias = False resolve_aws_alias = False

10
home-manager/veracode/aws-cli.nix
View File

@ -560,11 +560,6 @@ in
]; ];
programs.zsh.shellAliases = { programs.zsh.shellAliases = {
export-aws-govus-stage = ''${pkgs.writeShellScript "export-aws-govus-stage" ''
gimme-aws-creds --profile govus-stage
echo "export AWS_REGION=us-gov-west-1"
''}'';
veracode-find = ''${pkgs.writeShellScript "veracode-find" '' veracode-find = ''${pkgs.writeShellScript "veracode-find" ''
for profile in $(aws configure list-profiles | grep -E '^(us|eu|old-world|longbow)-'); do for profile in $(aws configure list-profiles | grep -E '^(us|eu|old-world|longbow)-'); do
echo "=== $profile ===" echo "=== $profile ==="
@ -607,5 +602,10 @@ in
aws sso login --profile old-world-aws-devops & aws sso login --profile old-world-aws-devops &
aws sso login --profile longbow-SharedServices & aws sso login --profile longbow-SharedServices &
''}''; ''}'';
veracode-login-govus-stage = ''${pkgs.writeShellScript "export-aws-govus-stage" ''
gimme-aws-creds --profile govus-stage
${pkgs.gnugrep}/bin/grep "^\[403885414333-Corp-Engineer\]" -A1 ${homedir}/.aws/credentials | ${pkgs.coreutils}/bin/tail -n 1 | ${pkgs.gnugrep}/bin/grep -q "region" || ${pkgs.gnused}/bin/sed -i '/^\[403885414333-Corp-Engineer\]$/a region = us-gov-west-1' ${homedir}/.aws/credentials
''}'';
}; };
} }